In September 2022, a regular NFT trader fell victim to one of the newest scams in the Web3 space. The victim agreed to an NFT swap – but was tricked into agreeing to receive a fake token, losing their prized MAYC token in exchange.

The NFT swap order scam is rife, but the key to avoiding it is knowing what to look out for. So in this article, let us walk you through the scam, explain exactly how it worked – and show you the red flags that could enable YOU to avoid losing an NFT in the same way.

NFT Swap Order Scam Explained

Peer-to-peer NFT trades are one of the newest options to hit the crypto market. They enable users to make direct swaps between wallets, without using a central protocol. Platforms such as NFTTrader and Sudoswap enable NFT swaps in a secure way via something called a swap order.

What Is an NFT Swap Order?

A swap order is a customized trade that can be created by anyone looking to swap an NFT. By signing a swap order, you give permission to whatever instruction it contains. In this case, permission to take a given NFT from your wallet.

Using swap orders enables NFTs to be traded directly between users’ wallets. The trade can either be for another NFT, for crypto, or for a mixture of both. The precise conditions of the trade are determined by whoever creates the order.

Once created, the swap order will have its own page containing full details of the trade, including: a picture of the tokens being traded, a link to the OpenSea page showing the host smart contract for the token and a link to the Etherescan page showing full detail of that smart contract.

How Did the Scam Work?

In this case, the victim was contacted directly by the scammer via a private message. The scammer proposed a swap between two MAYC tokens, volunteering to throw in some extra ETH as part of the deal. The scammer then created the swap order, and sent the code to the victim.

Scam Summary

Now you have all the relevant context, let’s recap now exactly how this scam worked. And what measures you, the buyer, would use to avoid it yourself.

l Swap orders are created by whoever proposes the NFT trade

l The order page shows you the NFT image – but no smart contract information

l The scammer creates a fake NFT using images from the real collection

l The fake NFT (looking like the real deal) appears on the swap page, seeming legit

l Trusting buyers don’t scrutinize beyond this – and hit confirm on the scam

How To Avoid the NFT Swap Order Scam

Web3 is full of scams and dupes – but there is great news for you. With absolutely everything existing on-chain, you have more power than ever to look behind the scenes and check out exactly what you’re buying.

Here are a few different ways you can spot this scam yourself.

When swapping, always use Etherscan to:

l Check the contract creation date or when the tokens were first minted to ensure they match the real collection

l Check out the transaction activity to see if the trading volume matches what you’d expect from a big collection

l Verify that the Etherscan page itself is genuine by cross-checking the contract ID with the project’s official site or Opensea

l Check for spelling errors in the name of the contract page

Keep Learning, Stay Secure

Web3’s buzzing internet of value presents a world of new options, all of them accessible directly from your wallet. But here, your hard-earned crypto is always at stake – and mistakes don’t have an “undo” button.

That’s why it’s never been more important to understand what types of scam are being deployed, and how to spot them.